Se connecter Démarrer

Blog

Alertes, guideset veille WordPress.

Vulnérabilités, maintenance et SEO WordPress, expliqués avec précision. Chaque article décrit le risque et la marche à suivre.

32054

Vulnérabilités (CVE)

1

Guides publiés

349

Publiés ce mois-ci

Filtre par plugin

pop up

WiserNotify – Social Proof & FOMO Notifications, WooCommerce Sales Popups, Reviews & Announcement Bar

MoyenneCVSS 5.3

CVE-2023-41690

Défaut de contrôle d'accès dans WiserNotify – Social Proof & FOMO Notifications, WooCommerce Sales Popups, Reviews & Announcement Bar (<= 2.5)

Plugin: WiserNotify – Social Proof & FOMO Notifications, WooCommerce Sales Popups, Reviews & Announcement Bar
Versions: <= 2.5
CVSS: 5.3/10
Correctif: 2.6

HollerBox — Fast & Effective Popups & Lead-Generation

MoyenneCVSS 4.4

CVE-2023-41657

XSS stocké, authentifié (Administrateur+), dans HollerBox — Fast & Effective Popups & Lead-Generation (<= 2.3.2)

Plugin: HollerBox — Fast & Effective Popups & Lead-Generation
Versions: <= 2.3.2
CVSS: 4.4/10
Correctif: 2.3.3

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

MoyenneCVSS 4.4

CVE-2023-4390

XSS stocké, authentifié (Administrateur+), dans Popup Box – Create Countdown, Coupon, Video, Contact Form Popups (<= 3.7.2)

Plugin: Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
Versions: <= 3.7.2
CVSS: 4.4/10
Correctif: 3.7.2

Popup Builder – Create highly converting, mobile friendly marketing popups.

MoyenneCVSS 4.4

CVE-2023-3226

XSS stocké, authentifié, dans Popup Builder – Create highly converting, mobile friendly marketing popups. (<= 4.2.1)

Plugin: Popup Builder – Create highly converting, mobile friendly marketing popups.
Versions: <= 4.2.1
CVSS: 4.4/10
Correctif: 4.2.2

Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits

ÉlevéeCVSS 7.3

CVE-2023-40679

Défaut de contrôle d'accès dans Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits (<= 2.0.5.3)

Plugin: Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
Versions: <= 2.0.5.3
CVSS: 7.3/10
Correctif: 2.0.5.4.1

Social Proof Popups & Real-Time Notifications – Herd Effects

MoyenneCVSS 4.3

CVE-2023-4318

CSRF (Cross-Site Request Forgery) dans Social Proof Popups & Real-Time Notifications – Herd Effects (<= 5.2.3)

Plugin: Social Proof Popups & Real-Time Notifications – Herd Effects
Versions: <= 5.2.3
CVSS: 4.3/10
Correctif: 5.2.4

Social Proof Popups & Real-Time Notifications – Herd Effects

MoyenneCVSS 4.4

CVE-2023-4022

XSS stocké, authentifié (Administrateur+), dans Social Proof Popups & Real-Time Notifications – Herd Effects (<= 5.2.3)

Plugin: Social Proof Popups & Real-Time Notifications – Herd Effects
Versions: <= 5.2.3
CVSS: 4.4/10
Correctif: 5.2.3

Smart Popup by Supsystic

MoyenneCVSS 6.3

CVE-2023-39997

CSRF (Cross-Site Request Forgery) dans Smart Popup by Supsystic (<= 1.10.19)

Plugin: Smart Popup by Supsystic
Versions: <= 1.10.19
CVSS: 6.3/10
Correctif: 1.10.20

MoyenneCVSS 4.4

CVE-2023-25465

XSS stocké, authentifié (Administrateur+), dans wp tell a friend popup form (<= 7.1)

Plugin: wp tell a friend popup form
Versions: <= 7.1
CVSS: 4.4/10
Correctif: Aucun

MoyenneCVSS 5.4

CVE-2023-25463

CSRF (Cross-Site Request Forgery) dans wp tell a friend popup form (<= 7.1)

Plugin: wp tell a friend popup form
Versions: <= 7.1
CVSS: 5.4/10
Correctif: Aucun

MoyenneCVSS 4.3

CVE-2022-27861

Redirection ouverte dans Ninja Popups (<= 4.7.7)

Plugin: Ninja Popups
Versions: <= 4.7.7
CVSS: 4.3/10
Correctif: 4.7.8

AI Popup Builder & Popup Maker by OptiMonk

MoyenneCVSS 4.3

CVE-2023-37891

CSRF (Cross-Site Request Forgery) dans AI Popup Builder & Popup Maker by OptiMonk (<= 2.0.4)

Plugin: AI Popup Builder & Popup Maker by OptiMonk
Versions: <= 2.0.4
CVSS: 4.3/10
Correctif: 2.0.5

313 – 324 sur 433 articles